Sensitive Data Leaked from Popular Turkish Quran App
Sensitive Data from Quran Kuran App Left Unprotected
On August 15th, cybersecurity researchers uncovered a serious data breach involving the Quran Kuran app, exposing over 3.6 million sensitive records online. This app, developed by Istanbul-based Sigma Telecom, allows users to study and learn the Quran while aiding prayer practices.
Shockingly, an unsecured Elasticsearch server had left this data accessible to anyone with an internet connection. The app, available on Google Play Store with over 1 million downloads, now faces scrutiny over how user data was mishandled.
What Information Was Leaked?
| Type of Data | Details |
|---|---|
| Geodata | Location-based information that reveals the geographical position of users. |
| MAC Addresses | Unique device identifiers assigned to each device on the network. |
| IP Addresses | Unique addresses that identify devices on the internet or a local network. |
| SIM Serial Numbers | Unique serial numbers assigned to each SIM card, allowing identification of mobile devices. |
| Carrier Information | Details about the mobile carrier network the user is connected to. |
| Device and Network Identifiers | Unique identifiers for both the user's device and the network it connects to. |
| Application-Specific Details | Information specific to the app, such as settings, user preferences, or usage data. |
Important Note: Such data, particularly geodata and SIM serial numbers, could enable unauthorized surveillance and identity theft if misused by cybercriminals.
Why This Breach Raises Serious Concerns
The breach has profound implications for user privacy and safety. Leaked geodata and network identifiers could make users vulnerable to tracking, while SIM serial numbers might allow malicious actors to monitor app users’ movements.
Cybersecurity experts warn this exposure could be exploited in scenarios like protests, where cellular traffic is often intercepted. Such risks compound the broader issue of privacy violations targeting religious communities.
Not the First Time Muslim Data Was Compromised
This incident recalls the 2020 revelation that the US government purchased geolocation data from Muslim prayer apps. At the time, the American Civil Liberties Union (ACLU) condemned such practices, labeling them a severe threat to privacy and religious freedom.
According to Cybernews, the Quran Kuran developers have since secured the exposed database, but no official statement has been issued. Stay tuned to Trendsnip for updates.
About the Author
Speed is everything in eCommerce – this article breaks down the best hosting for WooCommerce.
Thank you for your comment. This article truly highlights this serious issue. Raising awareness is important.
Excellent read! Managing cloud servers can feel daunting, but platforms like Cloudways make it effortless without sacrificing performance. Their approach to simplifying server management while ensuring scalability is spot-on—highly recommend for anyone craving a hassle-free hosting experience. Keep the great content coming! Visit the link.